Index: test/mjsunit/wasm/large-offset.js |
diff --git a/test/mjsunit/wasm/large-offset.js b/test/mjsunit/wasm/large-offset.js |
new file mode 100644 |
index 0000000000000000000000000000000000000000..5e88a4ed9097c318ebacb04931835e49bbe1db0d |
--- /dev/null |
+++ b/test/mjsunit/wasm/large-offset.js |
@@ -0,0 +1,24 @@ |
+// Copyright 2017 the V8 project authors. All rights reserved. |
+// Use of this source code is governed by a BSD-style license that can be |
+// found in the LICENSE file. |
+ |
+load("test/mjsunit/wasm/wasm-constants.js"); |
+load("test/mjsunit/wasm/wasm-module-builder.js"); |
+ |
+function testGrowMemoryOutOfBoundsOffset() { |
+ print("testGrowMemoryOutOfBoundsOffset2"); |
+ var builder = new WasmModuleBuilder(); |
+ builder.addMemory(16, 128, false); |
+ builder.addFunction("main", kSig_v_v) |
+ .addBody([ |
+ kExprI32Const, 20, |
+ kExprI32Const, 29, |
+ kExprGrowMemory, kMemoryZero, |
+ kExprI32StoreMem, 0, 0xFF, 0xFF, 0xFF, 0x7a |
Eric Holk
2017/06/13 16:19:48
Ah, here's the way out of bounds test! Thanks.
Co
gdeepti
2017/06/13 21:25:43
Done.
|
+ ]) |
+ .exportAs("main"); |
+ var module = builder.instantiate(); |
+ assertTraps(kTrapMemOutOfBounds, module.exports.main); |
+} |
+ |
+testGrowMemoryOutOfBoundsOffset(); |